Untitled

<?
session_start();
define('IN_MAIN', true);
include("common.php");
require_once("admin/admfunc.inc.php");

function RouteCmd($cmd,$saves,$db)
{
  $modules=array("users"=>"user.adm.php",
                 "services"=>"service.adm.php",
                 "settings"=>"settings.adm.php");

  if(!empty($modules[$cmd]))
  {
      $module_file=$modules[$cmd];
      require_once("admin/$module_file");
      if(function_exists("initialize_module"))
      {
         initialize_module($saves,$db);
      }
  }
  else
  {
    if(!$saves)
    {
       if($cmd!="")
         echo "Nie ma takiego modu&#322;u";
       else
         echo "<b>Witaj w Panelu Zarz&#261;dzania</b>";
    }
  }

  return false;
}

function loginform()
{
    require_once("classes/form.php");

    $hf=new HtmlForm("admin.php?dologin=1");
    $hte=new HtmlForm();
    $hf->AddHtml("<center><br>");
    $hf->StartTab("module","Logowanie do Panelu Admina/Pracownika","2",200);

    $hte->TextField("login");
    $tabrow=array();
    $tabrow[]=array("text"=>"Login:","options"=>"align=center");
    $tabrow[]=array("text"=>$hte->Parse());
		echo $tabrow[0];

    $hte->Clear();
    $hte->Pass("pass");

    $hf->TabRow($tabrow,"height=25");
    $tabrow=array();
    $tabrow[]=array("text"=>"Has&#322;o:","options"=>"align=center");
    $tabrow[]=array("text"=>$hte->Parse());
    $hf->TabRow($tabrow,"height=25");
    $hf->CloseTab();
    $hf->Hidden("dologin","1");
    $hf->SubmitButton("Zaloguj");
    $hf->PrintForm();
}

function start_session()
{

  if(isset($_SESSION['user_id']) && isset($_SESSION['pass']))
  {
      if($_SESSION['user_id']==0 && $_SESSION['pass']==ADMIN_PASSWORD)
      {
         $_SESSION['login']="Admin";
         return true;
      }
  }

 include("index-header.php");
 loginform();
 include("index-footer.php");
 exit;

}

function dologin()
{
  $login=$_POST['login'];
  $pass=$_POST['pass'];

/**** przerobki *****/
		connect();
		$result = mysql_query("SELECT * FROM users");
		$row = mysql_fetch_array($result);

		//$userclass = $row['userclass'];
		$userpass = $row['pass'];


	echo $login;
  if($login==ADMIN_LOGIN && $pass==ADMIN_PASSWORD)
  {
     $_SESSION['user_id']=0;
     $_SESSION['pass']=ADMIN_PASSWORD;
     return true;
  }
	elseif($login == $row['login'] && $row['userclass'] == 'pracownik')
	{
		$_SESSION['user_id']=0;
		$_SESSION['pass']=$userpass;
		return true;
	}

  return false;
}
/****** koniec *****/

if(isset($_POST['dologin']))
{
  dologin();
}

$userdata=start_session();

$cmd=isset($_GET['cmd']) ? $_GET['cmd'] : "";
if($cmd=="logout")
{
   session_destroy();
   Redirect("index.php");
}

RouteCmd($cmd,true,$db);

include ("index-header.php");
?>
<h
<meta name="generator" content="WebSite PRO 4.3" />
<link rel="stylesheet" type="text/css" href="style.css">
<body>

<?

$aOptionLink=array(
"U&#380;ytkownicy"=>"users",
"Us&#322;ugi"=>"services",
"Ustawienia"=>"settings",
"Wyloguj"=>"logout"
);

/*************** PRZEROBKI  ********************************/

    function connect() // fukncja laczenia z odpowiednia baza
    {
				$db_host = DB_HOST;
				$db_user = DB_USER;
        $db_pass = DB_PASS;
        $db_name = DB_NAME;

        if(!@mysql_connect($db_host, $db_user, $db_pass))
        {
            echo mysql_error();
            exit("<div style='font-family:tahoma;font-size:11px;color:red'><b>Po&#322;aczenie z baz&#261; danych MySQL zakonczy&#322;o si&#281; niepowodzeniem</b></div>");
        }

        if(!@mysql_select_db($db_name))
        {
            echo mysql_error();
            exit("<div style='font-family:tahoma;font-size:11px;color:red'><b>Wybranie bazy zakonczylo sie niepowodzeniem</b></div>");
        }
    }


/************** koniec  ********************************/


StartAdminLink();

while(list($description,$cur_cmd)=each($aOptionLink))
{
  echo "<tr><td class=txt style='padding-left:5px;' background='belka2.jpg' height=23><a HREF='admin.php?cmd=$cur_cmd'><b>$description</A></td></tr>";
}

EndAdminLink();
RouteCmd($cmd,false,$db);
EndAdminPanel();

include ("index-footer.php");

?>